{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,5]],"date-time":"2026-03-05T07:22:05Z","timestamp":1772695325489,"version":"3.50.1"},"reference-count":152,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T00:00:00Z","timestamp":1769817600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T00:00:00Z","timestamp":1769817600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation (NSF)","doi-asserted-by":"publisher","award":["2153936,2236855"],"award-info":[{"award-number":["2153936,2236855"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency (DARPA)","doi-asserted-by":"publisher","award":["W912CG-23-C-0025"],"award-info":[{"award-number":["W912CG-23-C-0025"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004063","name":"Knut and Alice Wallenberg Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004063","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100017567","name":"Apple","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100017567","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100002418","name":"Intel","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100002418","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100016443","name":"Amazon","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100016443","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,1,31]]},"DOI":"10.1109\/hpca68181.2026.11408570","type":"proceedings-article","created":{"date-parts":[[2026,3,4]],"date-time":"2026-03-04T20:47:22Z","timestamp":1772657242000},"page":"1-20","source":"Crossref","is-referenced-by-count":0,"title":["Protean: A Programmable Spectre Defense"],"prefix":"10.1109","author":[{"given":"Nicholas","family":"Mosier","sequence":"first","affiliation":[{"name":"Stanford University,Department of Computer Science,Stanford,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hamed","family":"Nemati","sequence":"additional","affiliation":[{"name":"School of Electrical Engineering and Computer Science, KTH Royal Institute of Technology,Stockholm,Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"John C.","family":"Mitchell","sequence":"additional","affiliation":[{"name":"Stanford University,Department of Computer Science,Stanford,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Caroline","family":"Trippel","sequence":"additional","affiliation":[{"name":"Stanford University,Department of Computer Science,Stanford,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"225","article-title":"Predicting secret keys via branch prediction","volume-title":"Cryptographers\u2019 Track at the RSA Conference","author":"Acri\u00e7mez"},{"key":"ref2","article-title":"Security analysis of amd predictive store forwarding","volume-title":"Advanced Micro Devices, Inc.","year":"2021"},{"key":"ref3","volume-title":"Technical guidance for mitigating branch type confusion","year":"2022"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23284"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3613424.3623770"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3466752.3480074"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA45697.2020.00022"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00066"},{"key":"ref9","first-page":"285","article-title":"Jumpswitches: Restoring the performance of indirect branches in the era of spectre","volume-title":"2019 USENIX Annual Technical Conference (USENIX ATC 19)","author":"Amit"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.44"},{"key":"ref11","article-title":"Acoustic side-channel attacks on printers","volume-title":"19th USENIX Security Symposium","author":"Backes"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3085572"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/PACT.2019.00020"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00008"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CSF64896.2025.00023"},{"key":"ref16","volume-title":"Cache-timing attacks on aes","author":"Bernstein","year":"2005"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/11502760_3"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/11745853_14"},{"key":"ref19","volume-title":"djbsort","author":"Bernstein","year":"2024"},{"key":"ref20","volume-title":"Benchmarking modern multiprocessors","author":"Bienia","year":"2011"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2024716.2024718"},{"key":"ref22","article-title":"ctaes","volume-title":"bitcoin-core","year":"2020"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3352460.3358310"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3185768.3185771"},{"key":"ref25","article-title":"A Systematic Evaluation of Transient Execution Attacks and Defenses","volume-title":"USENIX Security Symposium","author":"Canella"},{"key":"ref26","volume-title":"Cryptographic software in a post-spectre world. talk at the real world crypto symposium","author":"Carruth","year":"2022"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3385412.3385970"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833707"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev.2017.24"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623065"},{"key":"ref31","volume-title":"Speculative privacy tracking (spt)","author":"Choudhary","year":"2022"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3466752.3480068"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.19"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24286"},{"key":"ref35","article-title":"Prospect: Provably secure speculation for the constanttime policy","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Daniel"},{"key":"ref36","volume-title":"libsodium","author":"Denis","year":"2019"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14778\/3364324.3364331"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3173204"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134106"},{"key":"ref40","volume-title":"Speculative taint tracking (stt)","author":"Fletcher","year":"2024"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3676641.3716247"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317914"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3678890.3678907"},{"key":"ref44","article-title":"V8 javascript engine","year":"2024","journal-title":"Google LLC"},{"key":"ref45","article-title":"Translation Leak-aside Buffer: Defeating Cache Side-channel Protections with TLB Attacks","author":"Gras","year":"2018","journal-title":"USENIX Security\u201918"},{"key":"ref46","article-title":"Safebet: Secure, simple, and fast speculative execution","author":"Green","year":"2023","journal-title":"arXiv preprint"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-14423-3_13"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00036"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.22"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3062341.3062363"},{"key":"ref51","first-page":"1","article-title":"Levioso: Efficient compiler-informed secure speculation","volume-title":"Proceedings of the 61st ACM\/IEEE Design Automation Conference","author":"Hajiabadi"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3695053.3731048"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3634737.3637662"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ISEMC.2010.5711254"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/micro61859.2024.00045"},{"key":"ref56","article-title":"Analysis of Speculative Execution Side Channels","volume-title":"Intel","year":"2018"},{"key":"ref57","article-title":"Intel\u00ae core ${ }^{\\text {TM }}$ i9\u201312900ks processor","year":"2022","journal-title":"Intel"},{"key":"ref58","volume-title":"Affected processors: Guidance for security issues on intel\u00ae processors","author":"Corporation","year":"2024"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3340680"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.1998.742783"},{"key":"ref61","doi-asserted-by":"crossref","DOI":"10.1145\/3316781.3317903","article-title":"Safespec: Banishing the spectre of a meltdown with leakage-free speculation","volume-title":"2019 56th ACM\/IEEE Design Automation Conference (DAC)","author":"Khasawneh"},{"key":"ref62","article-title":"Flop: Breaking the apple m3 cpu via false load output predictions","author":"Kim","year":"2025","journal-title":"USENIX Security"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00098"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616611"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA59077.2024.00059"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2018.00083"},{"key":"ref67","first-page":"2399","article-title":"An analysis of speculative type confusion vulnerabilities in the wild","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Kirzner"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48405-1_25"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00033"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3579371.3589088"},{"key":"ref72","volume-title":"Gracemont: Revenge of the atom cores. Chips and Cheese","author":"Lam.","year":"2021"},{"key":"ref73","volume-title":"Popping the hood on golden cove. Chips and Cheese","author":"Lam.","year":"2021"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2004.1281665"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2019.00043"},{"key":"ref76","article-title":"Kernel samepage merging (ksm)","volume-title":"Linux Kernel Documentation","year":"2025"},{"key":"ref77","article-title":"zram","volume-title":"Linux Kernel Documentation","year":"2025"},{"key":"ref78","article-title":"zswap","volume-title":"Linux Kernel Documentation","year":"2025"},{"key":"ref79","article-title":"Meltdown","volume":"abs\/1801.01207","author":"Lipp","year":"2018","journal-title":"CoRR"},{"key":"ref80","article-title":"\u201clibc++","author":"Project","year":"2023","journal-title":"C++ Standard Library,\u201d Software"},{"key":"ref81","article-title":"The LLVM C Library","volume-title":"Software","year":"2023"},{"key":"ref82","article-title":"The LLVM Target-Independent Code Generator","volume-title":"LLVM Project","year":"2023"},{"key":"ref83","article-title":"Clang: a c language family frontend for llvm","volume-title":"LLVM Project","year":"2024"},{"key":"ref84","article-title":"The flang compiler","volume-title":"LLVM Project","year":"2024"},{"key":"ref85","article-title":"llvm-stress - generate random. ll files, LLVM Project","volume-title":"LLVM Project","year":"2025"},{"key":"ref86","first-page":"1397","article-title":"Dolma: Securing speculation with the principle of transient non-observability","volume-title":"USENIX Security Symposium","author":"Loughlin"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36552-4_24"},{"key":"ref88","volume-title":"Spectre is here to stay: An analysis of side-channels and speculative execution","author":"Mcilroy","year":"2019"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00045"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/s10766-018-0611-9"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.12688\/f1000research.29032.2"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1007\/11734727_14"},{"key":"ref93","article-title":"SPT: Fix pending squash bug","volume-title":"GitHub Pull Request \\#4 in repository FPSG-UIUC\/SPT","author":"Mosier","year":"2025"},{"key":"ref94","article-title":"SPT: Taint all registers at rename","volume-title":"GitHub Pull Request \\#6 in repository FPSG-UIUC\/SPT","author":"Mosier","year":"2025"},{"key":"ref95","article-title":"SPT: Untaint upper 32 bits of 32-bit destination registers","volume-title":"GitHub Pull Request \\#5 in repository FPSG-UIUC\/SPT","author":"Mosier","year":"2025"},{"key":"ref96","article-title":"stt: Fix pending squash bug","volume-title":"GitHub Pull Request \\#10 in repository cwfletcher\/stt","author":"Mosier","year":"2025"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00048"},{"key":"ref98","article-title":"Fast, accurate, and novel performance evaluations with pincpu","volume-title":"Presentation at the gem5 Workshop, 52nd Annual International Symposium on Computer Architecture (ISCA 2025)","author":"Mosier"},{"key":"ref99","article-title":"Swivel: Hardening WebAssembly against spectre","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Narayan"},{"key":"ref100","article-title":"nginx","year":"2025","journal-title":"NGINX"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/3368826.3377921"},{"key":"ref102","article-title":"You shall not bypass: Employing data dependencies to prevent bounds check bypass","volume":"abs\/1805.08506","author":"Oleksenko","year":"2018","journal-title":"CoRR"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/3676641.3716015"},{"key":"ref104","volume-title":"OpenSSL: Cryptography and SSL\/TLS toolkit","year":"2021"},{"key":"ref105","article-title":"Spectre and meltdown attacks against openssl","volume-title":"OpenSSL Blog","year":"2022"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/11605805_1"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD57390.2023.10323979"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484534"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241139"},{"key":"ref110","volume-title":"Bearssl","author":"Pornin","year":"2018"},{"key":"ref111","first-page":"1451","article-title":"Rage against the machine clear: A systematic analysis of machine clears and their implications for transient execution attacks","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Ragab"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1145\/3352460.3358314"},{"key":"ref113","first-page":"723","article-title":"Efficient invisible speculative execution through selective delay and value prediction","volume-title":"Proceedings of the 46th International Symposium on Computer Architecture","author":"Sakalis"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23239"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2019.03.002"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1145\/3708821.3733869"},{"key":"ref117","volume-title":"Linux Socket Filtering aka Berkeley Packet Filter (BPF)","author":"Schulist","year":"2018"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24271"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-64322-8_14"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134095"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1145\/605432.605403"},{"key":"ref122","article-title":"Spectre declassified: Reading from the right place at the wrong time","volume-title":"Cryptology ePrint Archive, Paper 2022\/426","author":"Shivakumar","year":"2022"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179418"},{"key":"ref124","article-title":"siege","year":"2025","journal-title":"J. Software"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.13"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304060"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-60876-1_2"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1145\/3410463.3414640"},{"key":"ref129","volume-title":"Retpoline: a software construct for preventing branch-targetinjection","author":"Turner","year":"2018"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2008.19"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1145\/3434330"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833570"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA52012.2021.00035"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2953709"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134038"},{"key":"ref136","article-title":"Wasi sdk: Wasi-enabled webassembly c\/c++ toolchain","year":"2024","journal-title":"WASI-SDK Contributors"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1145\/3290390"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1145\/3352460.3358306"},{"key":"ref139","first-page":"3825","article-title":"RETBLEED: Arbitrary speculative code execution with return instructions","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Wikner"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.45"},{"key":"ref141","volume-title":"Invisispec-1.0","author":"Yan","year":"2018"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2018.00042"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00004"},{"key":"ref144","article-title":"FLUSH+RELOAD: A high resolution, low noise, L3 cache side-channel attack","volume-title":"23rd USENIX Security Symposium","author":"Yarom"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53140-2_17"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23061"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA45697.2020.00064"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1145\/3352460.3358274"},{"key":"ref149","first-page":"7125","article-title":"Ultimate slh: Taking speculative load hardening to the next level","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Zhang"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO50266.2020.00094"},{"key":"ref151","article-title":"Opaque: An oblivious and encrypted distributed analytics platform","volume-title":"14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17)","author":"Zheng"},{"key":"ref152","article-title":"Lightslh: Provable and low-overhead spectre v1 mitigation through targeted instruction hardening","author":"Zhu","year":"2024","journal-title":"arXiv preprint"}],"event":{"name":"2026 IEEE International Symposium on High Performance Computer Architecture (HPCA)","location":"Sydney, Australia","start":{"date-parts":[[2026,1,31]]},"end":{"date-parts":[[2026,2,4]]}},"container-title":["2026 IEEE International Symposium on High Performance Computer Architecture (HPCA)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11408404\/11408433\/11408570.pdf?arnumber=11408570","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,5]],"date-time":"2026-03-05T06:51:07Z","timestamp":1772693467000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11408570\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,31]]},"references-count":152,"URL":"https:\/\/doi.org\/10.1109\/hpca68181.2026.11408570","relation":{},"subject":[],"published":{"date-parts":[[2026,1,31]]}}}